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Synopsis: &P1P r oxres the historic issuance of ECPA National 

Security Ldtter' (NSLs)for toll billing records; provides 
reporting data. 
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ephon e numbers submitted as part of NSL 
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Administrative: This document is classified 

SECRET/ /ORCON/NOFORN. Portions of this document carrying 
corresponding classification markings may not be incorporated 
into any criminal affidavit, criminal court proceeding or 
unclassified investigative file. The information in this 
document is intended to be used for lead or background purposes 
only. No further dissemination of the material classified ORCON 
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To : Ge neral Counsel 

Re: (S] 


SECRET/ /ORCON/NOFORN 

From: Counterterrorism bl 

I 03/06/2007 b7A 


in this document may be made without the prior approval of the 
originating agency . 

fK) This EC is being produced on this date to document an NSL 
is shed to on 05/12/2006 and reissued 

at the same time as this EC. The searches on these telephone 
numbers were conducted prior to the issuance of the NSLs. 


Details: j£^b^C/RF-h^The following telephone numbers were 

submitted to CAU by FBI field offices and headquarters 
operational personnel. Each target number was part of an 
existing FBI case. 
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Ge neral Counsel 
(S) 



From: Counterterrorism 

03/06/2007 



This electronic communication documents the 
approval and certification of a previously served NSL. For 
mandatory reporting purposes, the NSL seeks local and long 
distance toll billing records for 142 phone numbers. Each 
subject is presumed to be a United States Person. 

(U) In accordance with 18 U.S.C. § 2709(c), the senior 
official approving this EC, certified that a disclosure of the 
fact that the FBI has sought or obtained access to the 
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To : 
Re : 


Ge neral 
(S 


Counsel 


From: Counterterrorism 

03 / 06/2007 


bl 
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information sought by this letter may endanger the national 
security of the United States, interfere with a criminal, 
counterterrorism, or counterintelligence investigation, interfere 
with diplomatic relations, or endanger the life or physical 
safety of a person. 

dol More specifically, the manner in which the 
disclosure of the fact that the FBI has sought or obtained access 
to the information sought by this letter may prematurely disclose 
a national security threat assessment or investigation to the 
target and associates affiliated with the target, and cause them 
to alter their communications network to circumvent detection. 


(U) Any que stions regarding the above can be directed 

to uc r~ — — — — — j 
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SECRET/ /ORCON/NOFORN 



Set Lead 1 : (Action) 


GENERAL COUNSEL 

AT WASHINGTON, DC 

(U) NSLB is requested to record the appropriate 
information needed to fulfill the Congressional reporting 
requirements for NSLs. 
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AS DESCRIBED BY IG NUMBER OF FACTS AS REPORTED FOR PlOB 

INSTANCES 


Issuing NSL when PI had 1 

expired 

Issuing NSL seeking full 2 

credit report in Cl case 

Issuing NSL seeking full 3 

credit report (1681v) when 
EC authorizes only limited 
data ( 1 681 u) 

Received irrelevant info in 1 

response to NSL 

Ovcrcollcction of relevant 1 

info in response to NSL 


Complicated history on extensions - 
PI was open at time NSL issued 

Occurred 

B/c SAC signed the NSL for 
broader info, quarrel with idea it was 
not authorized. Sloppy paperwork. 
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ON CONTAINED 
ASSIFIEI 1 
BY 55159/: 
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Issuing NSL foil 


Illegality of this is unclear; no date 
actually obtained. 


This is being reported out 
of an abundance of 
caution. It is an open- 
ended legal question, as 
there are legal arguments 
on both sides of the issue, 


nt eot the 


and the age , 
approval of | 
counsel. But we are 
sending this through 
because we can not 


Vega! 


definitely say that this was 
not content information.. 
ECPA NSL seeking what 
IG believes are financial 
records requiring RFPA 
NSL 
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b5 

b2 

b7E 


Although EC citation was in error, 
records were properly described and 
RFPA referenced in NSL. 
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FCRA NSL uses 3 

certification language from 
RFPA 


Actual language differences arc 
minor; no individual rights affected. 

Instance 1 : NSL was issued under 
1 68 Iv but certification used RFPA 
language (which allows for NSL in 
both IT and Cl case); since case was 
IT, the RFPA language citing both IT 
and Cl had no legal impact. Further 
(and this was the mistake that the 
IOB EC picked upon, which OIG had 
not; the IOB EC does NOT refect 
the mistake that the Old found), EC 
synopsis stated NSL was issued 
under RFPA but rest of EC was 
accurate and ref ected IT nature of 
the case and the request for a 1681v 
NSL 

Instances 2 & 3 : NSL was issued 
under 168 1 v but certification used 
RFPA language (which allows for 
NSL in both IT and Cl case); since 
case was IT, the RFPA language 
citing both IT and Cl had no legal 
impact. The EC reflected the IT 
na ture of the case. 


Received irrelevant info in 1 

response to NSL 


b2 

b7E 


Overcolleclion of relevant 2 

info in response to NSL 


Mischaracterized as irrelevant; info 
was relevant and promptly covered 
with a new NSL. 


| mistakenly cited one NSL as 

source for subscriber information 
pertaining to a particular telephone 
number in an EC to file, when in fact 
a second NSL was the source for the 
subscriber information. Both NSL's 
were properly issued and there is no 
IOB violation. 


Instance I: 


received from 


the provider information that 


ATTORNEY CLIENT PRIVILEGED 
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covered two weeks prior to the 
beginning of the request. That period 
was consistent with the billing cycle. 
01 G had stated in report that 
overruns due to the billing cycle did 
not even need to be reported as 
PlOBs . Carrier error/choice 
involved; not FBI error. 

Instance 2 : received from 

the provider information 
covered two months prio 
beginning of the request, 
had issued an earlier NSL which 
covered more than a month of the 
overrun. Carrier error involved, not 
FBI error. 
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NSL VIO-38535 


Issuing NSL seeking full 1 

credit report (168 lv) when 
EC authorizes only limited 
data (168 lu) 

Although EC citation was 2 

in error records were 
property described and 
FCRAv was referenced in 
NSL which was also signed 
by the SA C. Received 
irrelevant info in response 
to NSL 


Ovcrcollcction of relevant 1 

info in response to NSL 


V-nO 
kj a . 

Received irrelevant info in 2 

response to NSL 


b2 

b7E 

b4 

b7D 


B/c SAC signed the NSL for broader 
info, quarrel with idea it was not 
authorized. Sloppy paperw ork. 


Instance l\ \ requested toll billing 

information from \ \ and 

received information for a number 
that was not requested in the NSL . 
The NSL was properly issued and 
there is no 10 B violation . 


Instance 2 : NSL served upon 
provider contained two correct 
telephone numbers. Authorizing EC 
contained typographical error with 
respect to one of the numbers. Not 
reportable: the fact that the 
authorizing EC contained an 
apparent typographical err or neither 
resulted in the issuance of an 
erroneous NSL, nor an unauthorized 
collection in violation of the NSIG 
and EC PA. 

| | received records beyond the 

scope of the NSL , but since it was 
carrier mistake, it is not reportable . 


b 


i^\ ""7 l" 1 

yj < Hi 


b4 


iU I 
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| | requested subscriber i nformation 

fron\ and 

received a number that was not 
assigned to an individual, but was an 
internet access number. The NSL 
was properly issued and there is no 
LOB violation. 
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AS DESCRIBED BY TG 


Issuing NSL when PT had 
expired 


Issuing NSL seeking full 
credil report in C I case 

Issuing NSL seeking full 
credit report (1681v) when 
EC authorizes only limited 
E data(1681u) 


Received irrelevant info in 
response to NSL 


Overcolleclion of relevant 
info in response to NSL 




Issuing NSL foi 



NUMBER OF 
INSTANCES 
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2 
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1 
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1 bo 


ECPA NSL seeking what 1 

IG believes are financial 
records requiring RFPA 
NSL 


FACTS AS REPORTED 
FOR PTOB 


Complicated history on 
extensions - PT was open 
at time NSL issued 

Occurred 


B/c SAC signed the NSL 
for broader info, quarrel 
with idea it was not 
authorized. Sloppy 
paperwork. 


Illegality of this is unclear 
no date actually obtained 
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FCRA NSL uses 3 

certification language from 
RE P A 

Actual language 1 

differences arc minor; no 
individual rights 
affectedReceived 
irrelevant info in response 
to NSL 

Overcollection of relevant 2 

info in response to NSL 


Issuing NSL seeking full 1 

credit report (1681 v) when 
EC authorizes only limited 
data ( 1 68 1 u) 

Received irrelevant info in 2 

response to NSL 

Overcollection of relevant 1 

info in response to NSL 


Mischaractcrizcd as 
irrelevant; info was 
relevant and promptly 
covered with a new NSL 


B/c SAC signed the NSL 
for broader info, quarrel 
with idea it was not 
authorized. Sloppy 
paperwork. 


Received irrelevant info in 2 

response to NSL 
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Target of Investigation 
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03/12/2007-EC was written referencing Grand 
Jury Subpoena results. 
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Target of Investigation 
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Justification for Exigent Letter 


The targeted phone numbers were associated 
with cell phone handsets that were known to be 
used by the captioned subject. Grand jury 
subpoenas issued. Documentation pending, 


Date NSL (or 
GJS) Issued 
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6/24/2005 
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ITOS 1 Exigent Letter use via CAU 



2/21/2008, 8:53 AM SECRET//ORCON/NOFORN//MR 9/10 



























NSL VIO-38547 


S EC R ET//ORCON/N OF OR N//M R 

ITOS 1 Exigent Letter use via CAU 



Predicating 

Target of Investigation 


Exigent Letter 

Exigent 


Date NSL (or 

Company 

Target Number 

Communication 

(case#, PI/FI) 

Date Opened 

Date 

Y/N 

Justification for Exigent Letter 

6JS) Issued 

Issued To 


Total % 


Numbers tarqeted in which exiqent letter was justified: 




Numbers tarqeted for which a NSL was issued t| 




Numbers targeted for which a NSL was issued to another carrier 




Numbers targeted: 
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Communication 


ITOS1 Exigent Letter use via CAU 

Targetoflnvestigation Exigent 

(case#, PI/FI) Date Opened fromMH Justification for Exigent Letter 


Date NSL Company 
Issued Issued To 
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1/13/2005 N 
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1/13/2005 N 
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Predicating 

Target Number Communication 



ITOS 1 Exigent Letter use via CAU 

Date of 

Target of Investigation Date Info from Exigent Date NSL Company 

(case#, PI/FI) Opened MH Y/N Justification for Exigent Letter Issued Issued To 

The targeted phone numbers were associated with 
1 cell phone handsets that were known to be used by 


4/12/2005 

N 

the captioned subject. 
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(S) 


ITOS 1 Exigent Letter use via CAU 

Date of 


Predicating Target of Investigation Date Info from Exigent ( S ) 

Target Number Communication (case #, PI/FI) Opened MH Y/N Justification for Exigent Letter 



1/5/2005 Y 



Date NSL Company 
Issued Issued To 
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Total % 
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Predicating T.argel of Investigation Dalr^ wit® Exigent 
Target Number Communication (case i, PI/FI) Opened fromMH YiN Justification for Exigent Letter 


Date NSL Company 
Issued Issued To 
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Predicating large! of Investigation Datr 
large! Number Communication (case#, PI/FI) Opened 


ITOS1 Exigent Letter use via CAU 

i? Exigent 
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Number is negative in ACS 
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IT0S1 Exigent Letter use via CAU 
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Communication 


Target of Investigation 
(case#, PI/FI) 
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Opened fromMH Y/N 


Justification for Exigent Letter 


Date NSL Company 
Issued Issued To 
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